ZRui-C/dsh-computer-use
C3Text-first browser & background macOS control for DeepSeek Harness (DSH): target the right process and window without taking the user's pointer. 为 DSH 提供文本优先的电脑控制：后台操作 Chromium 与 macOS，不抢前台、不移动鼠标。
★ 10+ · ZRui-C/dsh-computer-use source on GitHub · this plugin in the registry
ZRui-C/dsh-computer-use is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, can spawn subprocesses, executes system commands.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | subprocess, systemPrompt |
| can spawn subprocesses | subprocess_service | inject: subprocess |
| executes system commands | exec | ×16 src, e.g. scripts/build-native.mjs:1, scripts/build-native.mjs:1 |
| reads credential-class env vars | token_env | APPLE_API_KEY_ID, APPLE_API_KEY_PATH |
Services it injects
computerUse subprocess systemPrompt tools
Hooks it attaches
agent/disposed
Environment variables it reads
COMPUTER_USE_CODESIGN_IDENTITY COMPUTER_USE_ARCHS NOTARYTOOL_PROFILE APPLE_API_KEY_PATH APPLE_API_KEY_ID APPLE_API_ISSUER_ID PAGES_SCREENSHOT_DIR CHROME_EXECUTABLE DSH_COMPUTER_USE_APP_PATH
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.